[nsp-sec] DOS towards 212.181.112.29

Rob Thomas robt at cymru.com
Fri Mar 28 15:31:16 EDT 2008


Hi, team.

> Might want to check for flows to 212.181.112.29

Someone was using this IP to access IRC, and that same person made a 
crew of miscreants very unhappy.  The result was packet love.  We see at 
least one attack beginning at 2008-03-27 23:09:37.074659 UTC, with the 
host being wiped out no later than 2008-03-27 23:16:55.169279 UTC.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
http://www.team-cymru.org/
ASSERT(coffee != empty);




More information about the nsp-security mailing list